diff options
author | Corinna Vinschen <corinna@vinschen.de> | 2009-10-24 12:26:01 +0400 |
---|---|---|
committer | Corinna Vinschen <corinna@vinschen.de> | 2009-10-24 12:26:01 +0400 |
commit | 1647bf67c146d1e1d7169d1b413afb6a459b9ded (patch) | |
tree | 8dc722b0891ff6300a2fdf4a64895606e37029e9 /winsup/cygwin/security.cc | |
parent | 4c038a6101747075c53ad1de8d4eb8e79f8c8742 (diff) |
* fhandler.cc (fhandler_base::open): Always create file with default
security descriptor and fix descriptor afterwards. Change comment to
explain why.
* security.cc (alloc_sd): Drop setting the SE_DACL_PROTECTED flag.
* wincap.cc: Remove has_dacl_protect throughout.
* wincap.h: Ditto.
Diffstat (limited to 'winsup/cygwin/security.cc')
-rw-r--r-- | winsup/cygwin/security.cc | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/winsup/cygwin/security.cc b/winsup/cygwin/security.cc index c33be76c7..b8750eb8a 100644 --- a/winsup/cygwin/security.cc +++ b/winsup/cygwin/security.cc @@ -432,11 +432,6 @@ alloc_sd (path_conv &pc, __uid32_t uid, __gid32_t gid, int attribute, return NULL; } - /* We set the SE_DACL_PROTECTED flag here to prevent the DACL from being - * modified by inheritable ACEs. This flag is available since Win2K. */ - if (wincap.has_dacl_protect ()) - sd.Control |= SE_DACL_PROTECTED; - /* Create owner for local security descriptor. */ if (!SetSecurityDescriptorOwner (&sd, owner_sid, FALSE)) { |